Outt
Sett
Behavioral task
behavioral1
Sample
b7e1f75969582b490d875aab42604b04_JaffaCakes118.dll
Resource
win7-20240704-en
Target
b7e1f75969582b490d875aab42604b04_JaffaCakes118
Size
67KB
MD5
b7e1f75969582b490d875aab42604b04
SHA1
2d43d6022744574cf2418017ffc189d90e0efb9b
SHA256
d2a6cb6f8476b7d10b75db63d12f3f32e4c055d61773787fbcd9171e07898167
SHA512
cff0782873a5eda2dd0363b9f66009b04d20f0ecaec05dca61ca1d3f9fbf4652dcea04e3212aa8b62237e14af15cc10805bd2f08650c8785b8bcfe9d3877f93b
SSDEEP
1536:rAUL65EwlLmYK9PUlUvmerikCvBY6RJeC0+XdD4ZEHfUsmjpSg:E3RL6PU6uKCbRJeC0Wp38fjR
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b7e1f75969582b490d875aab42604b04_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ